{"id":"CVE-2019-11137","title":"Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) proc…","summary":"Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) proc…","severity":"high","cvss":8.2,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-20"],"vendor":"intel","product":"xeon_platinum_8253_firmware","affected":["xeon_platinum_8253_firmware","xeon_platinum_8256_firmware","xeon_platinum_8260_firmware","xeon_platinum_8276_firmware","xeon_platinum_8276m_firmware","xeon_platinum_8276l_firmware","xeon_platinum_8280l_firmware","xeon_platinum_8260l_firmware","xeon_platinum_8280m_firmware","xeon_platinum_8260m_firmware","xeon_platinum_8280_firmware","xeon_platinum_8260y_firmware","xeon_platinum_8268_firmware","xeon_platinum_8270_firmware","xeon_platinum_8274_firmware","xeon_platinum_8284_firmware","xeon_platinum_9242_firmware","xeon_platinum_9282_firmware","xeon_platinum_8153_firmware","xeon_platinum_8156_firmware","xeon_platinum_8158_firmware","xeon_platinum_8176_firmware","xeon_platinum_8160_firmware","xeon_platinum_8164_firmware","xeon_platinum_8168_firmware","xeon_platinum_8170_firmware","xeon_platinum_8180_firmware","xeon_platinum_8160t_firmware","xeon_platinum_8160f_firmware","xeon_platinum_8176f_firmware","xeon_gold_6210u_firmware","xeon_gold_6244_firmware","xeon_gold_6212u_firmware","xeon_gold_6240_firmware","xeon_gold_5218_firmware","xeon_gold_6230_firmware","xeon_gold_5222_firmware","xeon_gold_6238t_firmware","xeon_gold_6248_firmware","xeon_gold_6252_firmware","xeon_gold_6242_firmware","xeon_gold_6240y_firmware","xeon_gold_5217_firmware","xeon_gold_6238m_firmware","xeon_gold_5218n_firmware","xeon_gold_6226_firmware","xeon_gold_6254_firmware","xeon_gold_5220_firmware","xeon_gold_6238l_firmware","xeon_gold_5218b_firmware","xeon_gold_6240l_firmware","xeon_gold_6238_firmware","xeon_gold_6240m_firmware","xeon_gold_5220s_firmware","xeon_gold_5215_firmware","xeon_gold_6222v_firmware","xeon_gold_6252n_firmware","xeon_gold_5215m_firmware","xeon_gold_6246_firmware","xeon_gold_5215l_firmware","xeon_gold_5218t_firmware","xeon_gold_5220t_firmware","xeon_gold_6209u_firmware","xeon_gold_6262v_firmware","xeon_gold_5122_firmware","xeon_gold_6138_firmware","xeon_gold_6148_firmware","xeon_gold_5120t_firmware","xeon_gold_6136_firmware","xeon_gold_6150_firmware","xeon_gold_6152_firmware","xeon_gold_6130_firmware","xeon_gold_6128_firmware","xeon_gold_5118_firmware","xeon_gold_6134_firmware","xeon_gold_6126_firmware","xeon_gold_5120_firmware","xeon_gold_5115_firmware","xeon_gold_6154_firmware","xeon_gold_6140_firmware","xeon_gold_6140m_firmware","xeon_gold_6132_firmware","xeon_gold_6138t_firmware","xeon_gold_6142f_firmware","xeon_gold_6130t_firmware","xeon_gold_6138f_firmware","xeon_gold_6130f_firmware","xeon_gold_6126t_firmware","xeon_gold_6126f_firmware","xeon_gold_6148f_firmware","xeon_gold_6146_firmware","xeon_gold_6144_firmware","xeon_silver_4209t_firmware","xeon_silver_4210_firmware","xeon_silver_4214_firmware","xeon_silver_4214y_firmware","xeon_silver_4215_firmware","xeon_silver_4208_firmware","xeon_silver_4216_firmware","xeon_silver_4116_firmware"],"published":"2019-11-14","updated":"2026-10-08","sourceUpdated":"2026-10-08T21:17:10.493","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-11137","references":[{"url":"https://support.f5.com/csp/article/K56215245?utm_source=f5support&amp%3Butm_medium=RSS","label":"secure@intel.com"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03967en_us","label":"secure@intel.com"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00280.html","label":"secure@intel.com"},{"url":"https://support.f5.com/csp/article/K56215245?utm_source=f5support&amp%3Butm_medium=RSS","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03967en_us","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00280.html","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.00381,"epssPercentile":0.29922,"ingestedAt":"2026-10-08T22:11:53.703Z","slug":"CVE-2019-11137","body":"## Overview\n\nInsufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege, denial of service and/or information disclosure via local access.\n\n## Affected\n\n- `xeon_platinum_8253_firmware`\n- `xeon_platinum_8256_firmware`\n- `xeon_platinum_8260_firmware`\n- `xeon_platinum_8276_firmware`\n- `xeon_platinum_8276m_firmware`\n- `xeon_platinum_8276l_firmware`\n- `xeon_platinum_8280l_firmware`\n- `xeon_platinum_8260l_firmware`\n- `xeon_platinum_8280m_firmware`\n- `xeon_platinum_8260m_firmware`\n- `xeon_platinum_8280_firmware`\n- `xeon_platinum_8260y_firmware`\n- `xeon_platinum_8268_firmware`\n- `xeon_platinum_8270_firmware`\n- `xeon_platinum_8274_firmware`\n- `xeon_platinum_8284_firmware`\n- `xeon_platinum_9242_firmware`\n- `xeon_platinum_9282_firmware`\n- `xeon_platinum_8153_firmware`\n- `xeon_platinum_8156_firmware`\n- `xeon_platinum_8158_firmware`\n- `xeon_platinum_8176_firmware`\n- `xeon_platinum_8160_firmware`\n- `xeon_platinum_8164_firmware`\n- `xeon_platinum_8168_firmware`\n- `xeon_platinum_8170_firmware`\n- `xeon_platinum_8180_firmware`\n- `xeon_platinum_8160t_firmware`\n- `xeon_platinum_8160f_firmware`\n- `xeon_platinum_8176f_firmware`\n- `xeon_gold_6210u_firmware`\n- `xeon_gold_6244_firmware`\n- `xeon_gold_6212u_firmware`\n- `xeon_gold_6240_firmware`\n- `xeon_gold_5218_firmware`\n- `xeon_gold_6230_firmware`\n- `xeon_gold_5222_firmware`\n- `xeon_gold_6238t_firmware`\n- `xeon_gold_6248_firmware`\n- `xeon_gold_6252_firmware`\n- `xeon_gold_6242_firmware`\n- `xeon_gold_6240y_firmware`\n- `xeon_gold_5217_firmware`\n- `xeon_gold_6238m_firmware`\n- `xeon_gold_5218n_firmware`\n- `xeon_gold_6226_firmware`\n- `xeon_gold_6254_firmware`\n- `xeon_gold_5220_firmware`\n- `xeon_gold_6238l_firmware`\n- `xeon_gold_5218b_firmware`\n- `xeon_gold_6240l_firmware`\n- `xeon_gold_6238_firmware`\n- `xeon_gold_6240m_firmware`\n- `xeon_gold_5220s_firmware`\n- `xeon_gold_5215_firmware`\n- `xeon_gold_6222v_firmware`\n- `xeon_gold_6252n_firmware`\n- `xeon_gold_5215m_firmware`\n- `xeon_gold_6246_firmware`\n- `xeon_gold_5215l_firmware`\n- `xeon_gold_5218t_firmware`\n- `xeon_gold_5220t_firmware`\n- `xeon_gold_6209u_firmware`\n- `xeon_gold_6262v_firmware`\n- `xeon_gold_5122_firmware`\n- `xeon_gold_6138_firmware`\n- `xeon_gold_6148_firmware`\n- `xeon_gold_5120t_firmware`\n- `xeon_gold_6136_firmware`\n- `xeon_gold_6150_firmware`\n- `xeon_gold_6152_firmware`\n- `xeon_gold_6130_firmware`\n- `xeon_gold_6128_firmware`\n- `xeon_gold_5118_firmware`\n- `xeon_gold_6134_firmware`\n- `xeon_gold_6126_firmware`\n- `xeon_gold_5120_firmware`\n- `xeon_gold_5115_firmware`\n- `xeon_gold_6154_firmware`\n- `xeon_gold_6140_firmware`\n- `xeon_gold_6140m_firmware`\n- `xeon_gold_6132_firmware`\n- `xeon_gold_6138t_firmware`\n- `xeon_gold_6142f_firmware`\n- `xeon_gold_6130t_firmware`\n- `xeon_gold_6138f_firmware`\n- `xeon_gold_6130f_firmware`\n- `xeon_gold_6126t_firmware`\n- `xeon_gold_6126f_firmware`\n- `xeon_gold_6148f_firmware`\n- `xeon_gold_6146_firmware`\n- `xeon_gold_6144_firmware`\n- `xeon_silver_4209t_firmware`\n- `xeon_silver_4210_firmware`\n- `xeon_silver_4214_firmware`\n- `xeon_silver_4214y_firmware`\n- `xeon_silver_4215_firmware`\n- `xeon_silver_4208_firmware`\n- `xeon_silver_4216_firmware`\n- `xeon_silver_4116_firmware`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":45.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}